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- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
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DETAILED ACTION 
Continued Examination Under 37 CFR 1.114 

1 . A request for continued examination under 37 CFR 1.114, including the fee set forth in 
37 CFR 1.17(e), was. filed in this application after final rejection. Since this application is 
eligible for continued examination under 37 CFR 1.1 14, and the fee set forth in 37 CFR 1.17(e) 
has been timely paid, the finality of the previous Office action has been withdrawn pursuant to 
37 CFR 1.1 14. Applicant's submission filed on 02/13/2006 has been entered. 

2. Claims 1-6 are presented for examination. 

Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

4. Claims 1-3 are rejected under 35 U.S.C. 103(a) as being unpatentable over Challender et 
al. USPN 6,959,390 Bl in view of Matyas, Jr. et al. USPN 6,947,556 Bl. 

Regarding claim 1, Challener et al. teaches a method of production and distribution of 
asymmetric public and private keys to provide certifications of transactions (fig. 4), comprising 
the steps of: 
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providing a key generation center in charge of generating a plurality of asymmetric 
public and private keys to be used to provide certificates of transactions (fig. 4 element 402 and 
408; plurality of private/public keys is generated for certifications), 

generating certificates comprising a public key and a private key in a first cryptographic 
unit (KPG) of the key generation center (claim 6), 

coding the private key by means of a service key in the key generation center in the first 
cryptographic unit (KPG) (col. 2 lines 59-67; encrypting private key of the user using master 
public key of the key generator) and storing said coded private key in a key memory (KPS) of the 
key generation center (claim 1; encrypting user's private keys and storing encrypted keys), 

when sending the public and private keys to a user unit, extracting the keys from the key 
memory (KPS), and composing the certificates with the public key (col. 3 lines 17-31, and claim 
1 ; extracting the keys from storage to be transmitted to users and attaching certificate), 

decoding the corresponding private key by means of a service key in a cryptographic 
security module and coding it with a transport key of the user (claim 1 and 6; encrypted keys are 
extracted, decrypted using master private key, and encrypted using user's public key). 

Challender et al. discloses coding the private key by means of a public master key. 
Challender et al. fails to disclose encrypting the private key by means of secret service key. 

However Matyas, JR. et al. discloses the well-known encryption of private key encrypting 
key method (col. 1 lines 53-col. 2 lines 58; encrypting the first key with the second personal key 
and further encrypting the first key with control key...). 

Therefore it would have been obvious to one having ordinary skill in the art at the time of 
the invention was made to combine the teachings of Matyas, Jr. et al. with in the system of 



Application/Control Number: 09/989,883 Page 4 

Art Unit: 2136 

Challender et al. because they are analogous in key management. One would have been 
motivated to do so because it would further secure key by encrypting keys using a well-known 
method of private key. 

Regarding claim 2, Challender et al. and Matyas, JR. et al. teach all the subject matter as 
described above. In addition Challender et al. discloses a method characterized in that the 
encrypted private key is received by the user unit (DEC) and transmitted to the security module 
(SM) containing the transport key for decoding and storing the private key (claim 8). 

Regarding claim 3, Challender et al and Matyas, JR. et al. teach all the subject matter as 
described above. In addition Challender et al. discloses teaches a method characterized in that it 
consists in using several monolithic cryptographic unit to obtain a high speed coding module 
(col. 5 lines 5-41). 

5. Claims 4-6 are rejected under 35 U.S.C. 103(a) as being unpatentable over Challender et 
al. USPN 6,959,390 Bl in view of Matyas, Jr. et al. USPN 6,947,556 Bl and further in view of 
Tarpenning et al. USPG PUB 2002/0007454 Al . 

Regarding claims 4, 5, and 6, Challender et al. and Matyas, JR. et al. teach all the subject mater 
as described above. Challender et al. and Matyas, JR. et al. fail to explicitly disclose coding the 
public key of the center with the transport key, transmitting it to user unit, receiving it at the 
users unit, decoding and it at the user unit. 
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However Tarpenning et al. teaches a method characterized in that it consists in: 
coding the public key of the center with the transport key and transmitting it to the user 
unit PEC) (0032), 

receiving by the user unit, the encrypted public key and transmitting it to the security 
module (SM) (fig. 2), 

decoding and storing the public key by means of the transport key inside the security 
module (SM) (0033). 

Therefore it would have been obvious to one having ordinary skill in the art at the time 
oft the invention was made to employ the teachings of encrypting the public key of the center 
using the user's public key/transport key within the combination system of Challender et al. and 
Matyas, JR. et al because they are analogous in generation of keys and certificates. One would 
have been motivated to incorporate the teachings of Tarpenning et al. within the combination 
system because it would allow secure authentication of users identity. 

Conclusion 

6. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Eleni A. Shiferaw whose telephone number is 571-272-3867. . 
The examiner can normally be reached on Mon-Fri 8:00am-5:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R. Sheikh can be reached on 571-272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent' 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 





